Libtiff Exploit Found in Firmware 5.50

Update: Seems this is an older tiff that wololo posted. This got out of hand, information we thought was new isn’t really and this won’t lead to an exploit its just a crash. Plain and simple. We apologise for this. It seems the source of this libtiff crash got it wrong and well…we were caught unaware. Comments have been closed as to not add further fuel to the fire. Noob81 puts it best on the Dark-Alex forums about this

Things are certainly getting interesting as of late… Recent exploits which lead to chickHEN and now PSP developer wololo has found another. This time its a Libtiff Exploit for Firmware 5.50. Here’s some video proof.

Source: Dark-Alex.org

Related posts

• Video: HEN PSP-3000 Running Homebrew & Emulators (55)
• TIFF Exploit / HEN postponed (83)
• TIFF Based Exploit found, Firmware 5.03 Says Hello World! (51)
• PSP-3000 HEN will not have ISO / CSO support (165)
• PSP-3000 HEN / Homebrew Enabler coming soon! (309)

Davee: ChickHEN R2 Released - Homebrew now works

True to his word, Davee has released ChickHEN R2 for Firmware 5.03. This release Davee has fixed the homebrew bug and TIFF images have been blocked while in HEN.

ChickHEN R2 for Firmware 5.03 Changelog:

[ChickHEN Revision 2] – Team Typhoon

[Changelog]
- Now supports homebrew
- Homebrew Support enhanced
- Tiff image blocking in HEN (displays unsupported)

[What it does?]
ChickHEN works as a homebrew enabler for all PSP models (1000, 2000 and 3000) and allows execution of homebrew games and apps on 5.03 Official firmware. It can allow you to play games such as Bugz!, Jellycar or run apps such as pspfiler and PSPTube. Homebrew enhances the experience of a normal PSP without any faulty side-effects.

[What it does not do?]
- Run ISO, CSO or any other form of UMD backup.
- Run PSX Games
- Touch The Flash of your beloved PSP
- Magically allow the use of Custom Firmware (on TA-088v3 or PSP 3000)
- Load plugins

[How do I use it?]
Depending on your PSP Model, you’re going to need a specific tiff image. If you have a Phat (1000) PSP, use the tiff image supplied in the “PHAT” folder and  copy it to ms0:/PSP/PHOTO. Else copy the tiff image in the “SLIM” folder to ms0:/PSP/PHOTO.
After you’ve copied the image to your PSP, you can copy the h.bin supplied to the root of the memorystick (ms0:/). This should be sufficient for PSP to reboot into ChickHEN.

[Can it break my PSP?]
ChickHEN works differently to all previous HEN’s. Instead of flashing to flash0, it resides entirely in RAM to prevent any damage to the system. Sure enough, you can run applications in HEN to flash stuff but I strongly recommend against it. ChickHEN comes with no warrenty, no guanantee and you run this software under your own responsibility.

As stated, HEN comes with no warrenty, and this software should not be used in conjunction with homebrew which can countervent any copyright laws.

[Credits]
Team Typhoon – ChickHEN
MaTiAz: TIFF Eggsploit
Lawrence Jackson (LCJ14) – PSP 3000
Cloudy: Betatesting
MforMature staff: For everything
Everyone else who gave help during the development

So just like before depending on weather you have a PSP-1000 (fat) or PSP-2000 / PSP-3000 (slim) place the h.bin file in your MS root and the chickHEN folder with images in PSP/PHOTO on your memory stick pro duo. Now if you don’t have that folder PSP/PHOTO don’t panic just create it and place the folder in there.

For example if you have a PSP-3000 you would put the Slim ChickHEN folder in PSP/PHOTO so it looks like PSP/PHOTO/ChickHEN with the pretty egg gifs inside. (Sorry but we have to be crystal clear for some people it seems!)

Now making sure you have PSP Firmware 5.03 installed, don’t have PSP firmware 5.03? Get it here -> PSP Firmware 5.03

Ok now in the PSP XMB go to Photo’s / Memory stick and then the chickHEN folder and wait! If it works you’ll see a few colours flash and then your PSP is rebooting itself loading up the chickHEN homebrew environment. Now you can go to Game in the XMB and load some homebrew!!. This time it will work!

Now you’ll be looking for some Emulators like GBA emulators, Super Nintendo, plus some cool homebrew games. Visit our huge PSP Emulator section and PSP Downloads for homebrew games, homebrew applications for your homebrew enabled PSP-3000 or TA88v3 PSP-2000.

Source: Davee’s Site

Related posts

• Video: HEN PSP-3000 Running Homebrew & Emulators (55)
• ChickHEN Released! Homebrew on all PSP’s (250)
• WIP Video 5.03 GEN-B for HEN running 5.55+ OFW games (71)
• Ultimakillz’s PSP Tutorial on How to Install CFW on Any PSP (18)
• TIFF Exploit / HEN postponed (83)

ChickHEN - bugfix has been released!

Update 7th May : Davee has released ChickHEN R2 so its better you download that -> http://pspslimhacks.com/chickhen-r2-for-frimware-503-released/

Quick to fix yesterdays semi-disastrous chickHEN release, maibrithahn has released an unofficial ChickHEN Homebrew Enabler fixed h.bin. We have tested this and can report we have working homebrew on our PSP-3000 unit. So just like before depending on weather you have a PSP-1000 (fat) or PSP-2000 / PSP-3000 (slim) place the h.bin file in your MS root and the chickHEN folder with images in PSP/PHOTO on your memory stick pro duo. Now if you don’t have that folder PSP/PHOTO don’t panic just create it and place the folder in there.

For example if you have a PSP-3000 you would put the Slim ChickHEN folder in PSP/PHOTO so it looks like PSP/PHOTO/ChickHEN with the pretty egg gifs inside. (Sorry but we have to be crystal clear for some people it seems!)

Now making sure you have PSP Firmware 5.03 installed, don’t have PSP firmware 5.03? Get it here -> PSP Firmware 5.03

Ok now in the PSP XMB go to Photo’s  / Memory stick and then the chickHEN folder and wait! If it works you’ll see a few colours flash and then your PSP is rebooting itself loading up the chickHEN homebrew environment. Now you can go to Game in the XMB and load some homebrew!!. This time it will work!

Related posts

• ChickHEN Released! Homebrew on all PSP’s (250)
• Video: HEN PSP-3000 Running Homebrew & Emulators (55)
• TIFF Exploit / HEN postponed (83)
• TIFF Based Exploit found, Firmware 5.03 Says Hello World! (51)
• PSP-3000 HEN will not have ISO / CSO support (165)

ChickHEN for firmware 5.03. Enables homebrew on all PSP's

The day many PSP-3000 and TA88v3 owners have been waiting for has finally arrived as Davee has released chickHEN. Using the TIFF Exploit discovered earlier by MaTiAZ, Davee found a way to use that with his new Kernel exploit to allow homebrew on all PSP’s. That includes the previously thought unhackable TA88v3 Motherboard found in PSP-3000’s and some newer PSP-2000 units.

This exploit requires a PSP with firmware 5.03. If you have a version less you can upgrade to 5.03 using this update: PSP Firmware 5.03 If you have a PSP with 5.50 or updated to 5.50 unfortunatly your stuck at the moment intill a downgrade option can be found.

Edit: It seems this release is “brokHEN” – plagued by a bug as myself and others haven’t been able to get any homebrew to work. It reboots fine but no homebrew games work as it ends in the PSP freezing. (I tried this on my PSP-3000) Rumor has it that a fix will be released tomorrow? I’m sure davee is aware of this bug and will be onto it.

5.03 ChickHEN Homebrew Enabler – Team Typhoon (Article by Granite) So comes the release of the highly anticipated ChickHEN homebrew enabler by Team Typhoon. After 1800 Lines of code, 4 weeks of stressful developing and countless amounts of tests the dawn of a new homebrew era for all the 3000, 2000 and 1000 users is on the horizon. What was said to be impossible by many is now a reality, all styles homebrew are now running on the “unhackable” T88v3 and TA-090 motherboards rolled out by Sony.

What does the ChickHEN do?
ChickHEN as a Homebrew Enabler that allows the execution of homebrew via the PSP XMB. Running via a vulnerability in the lib TIFF the launcher takes advantage of the system by performing a kernel exploit and rebooting into a homebrew enabled enviroment. The ChickHEN remains active until the PSP is fully reset in which case official firmware loads from the flash. ChickHEN unlike other HEN’s doesn’t touch the flash0 and resides completely in memory. The h.bin supplied in this download consists of a loader and systemex, which is a inversed order of systemctrl and rebootex

What ChickHEN does NOT do?
-Run ISO, CSO or any other form of UMD backup.
-Run PSX Games
-Touch The Flash of your beloved PSP
-Magically allow the use of Custom Firmware
-Load plugins

How do i get the HEN to run on my PSP?

1. First off use the supplied TIFF image and place it in the PSP>PHOTO Directory.
2. Copy h.bin over to the MS ROOT and safely remove device.
2. Scroll over to the PHOTO icon on the XMB and click the ChickHEN folder and wait. (This will not work the first time, you may have to just use a method of loading that works for you but this is what we have found most efficient)
3. If all goes well the screen should blank out and flash green showing that the HEN is loaded and all is well.
4. Wait for your PSP to reboot and check your PSP’s system software. It should now display: “5.03 ChickHEN”.
5. Scroll on over to GAME and enjoy some Homebrew!

Disclaimer:
This software should not be used in conjunction with software which can enable the usage or disable the protections of copyrighted content. We will not be held responsible for any damage to your PSP system. This software comes with no warrenty.

Credits:
Team Typhoon: ChickHEN
MaTiAz: TIFF Eggsploit
Lawrence Jackson (LCJ14) – PSP 3000
MforMature staff: For everything
Everyone else who gave help during the development

SHA-1 of h.bin: 39339DF6D67DA88BDFF78261222AAADAEBCD9203

Source: Davee’s official website

Related posts

• Video: HEN PSP-3000 Running Homebrew & Emulators (55)
• ChickHEN R2 for Firmware 5.03 Released (574)
• ChickHEN Homebrew Enabler Bugfix Released! (137)
• TIFF Exploit / HEN postponed (83)
• TIFF Based Exploit found, Firmware 5.03 Says Hello World! (51)

Edit:

According to M for Mature forums, as posted by Davee ChickHEN or HEN will be released in the next 24 hours. (We hope so and cannot wait!)

Originally Posted by Davee
Lemme get some facts straight.

HEN is designed to ONLY work on 5.03. Those who are on other firmwares need to update 5.03 to utilise HEN.

I am hoping for HEN release either later today or tomorrow, it depends on many factors (as currently I am not at home).

Thanks jiMbo for the tip!

Related posts

• TIFF Exploit / HEN postponed (83)
• PSP-3000 HEN will not have ISO / CSO support (165)
• PSP-3000 HEN / Homebrew Enabler coming soon! (309)
• HEN for Firmware 5.03 Video Proof & Update (183)
• ChickHEN Released! Homebrew on all PSP’s (250)

This video should also silence you non believers I think. HEN is real and not a Hoax. No release date has been set so we just have to wait a little more but it is coming!

Also posted was a recent interview with Project lead Davee on the M for Mature forums.

*Davee* We’ve got all the launcher working
*Davee* and the greater part of the modules work
*Davee* there is a bug in rebootex however, which is really hard to debug as there is no screen or IO
*Slasher* ah I see, so once this bug is fixed then, it should be all ready for release hopefully?
*Davee* probably not
*Davee* but it’s close
*Slasher* cool
*Slasher* are you relatively confident that this bug will be fixed? how hard is it to pinpoint it?
*Davee* Strongly confident
*Davee* If all my testing fails, I will reverse 5.00 M33 rebootex
*Davee* pinpointing is hard, as I have no debugging utilities
*Davee* it’s a matter of testing each patch individually

We will let you know as soon as its released. Oh and don’t update to Firmware 5.50 if you want to use HEN!

Thanks to VoXeR for the tip!

Source: M for Mature Forums

Related posts

• Video: HEN PSP-3000 Running Homebrew & Emulators (55)
• TIFF Exploit / HEN postponed (83)
• TIFF Based Exploit found, Firmware 5.03 Says Hello World! (51)
• PSP-3000 HEN will not have ISO / CSO support (165)
• PSP-3000 HEN / Homebrew Enabler coming soon! (309)

Posted in the dark-alex.org forums. It seems that Sony have removed tiff image file support completely with this new patch. I’m surprised it took Sony so long. Only some 3 years after the first tiff exploits? If you have any tiff files in your Memory stick, it will now show up and incompatible.

** Edit we have learned to they haven’t removed tiff support more of a bug which is present in extra transparency layer support. **

Some users report that standby mode doesn’t work any more on their PSP’s. While others have posted videos on youtube proving it does work….So not all PSP’s are effected by the bug. Proof maybe the firmware update was released early to patch against HEN? So if your wanting to try HEN when its released I suggest you keep away from that Network update button in your PSP’s XMB!

So it looks like we will have Firmware 5.51 soon I guess?

Also its interesting to add from DAX’s website sceners.org 5.50 hasn’t yet been decrypted.

Between those fixes it’s the recent TIFF exploit that was found and that it’s still under development, and it seems that there are also some bugs, like one that literally fucks the standby.

What do you think about those “new features”? Have you got any bugs like those or can confirm the standby one?

Edit: Seems like this new update has the encryption tables changed (at least the 1g one), as it can’t be decrypted with latest psardumper. Anyway, won’t be probably a problem.

Source: DarkAlex.org & Sceners.org

Related posts

• Video: HEN PSP-3000 Running Homebrew & Emulators (55)
• TIFF Exploit / HEN postponed (83)
• TIFF Based Exploit found, Firmware 5.03 Says Hello World! (51)
• Savegame Exploit found in PSP Firmware 5.50? (42)
• PSP-3000 HEN will not have ISO / CSO support (165)

TIFF Exploit / HEN release has been delayed... Patience Jedi

The team behind the TIFF Exploit has posted today that the TIFF exploit or HEN release has been delayed due to unforeseen problems creating a the release. In know alot of you have been eagerly awaiting this release. Please be patient, flaming comments will not bring this release any closer….

Update 4/21/09: It will not be released tonight (9:30PM EST as I’m writing this) and Davee will be gone for a good portion of the end of the week so there is no idea as to a new potential release date. We all ask for your patience as we work through these moments of anticipation and excitement.

NOTE: Davee and crew have been hard at work on getting HEN for us however they have ran into quite a few problems and have been working diligently to solve them. We ask for your patience at this time, we do not have an estimate for the release date (Davee originally said “by Tuesday” but that was before the complications arose). We will update you on any progress we get notified of!

Source: M for Mature

Related posts

• Video: HEN PSP-3000 Running Homebrew & Emulators (55)
• PSP-3000 HEN will not have ISO / CSO support (165)
• PSP-3000 HEN / Homebrew Enabler coming soon! (309)
• HEN for Firmware 5.03 Video Proof & Update (183)
• TIFF Based Exploit found, Firmware 5.03 Says Hello World! (51)

You won't be loading UMD ISO's

Here’s what davee posted today on the M for Mature forums

I assure you I have absolutely no intention of adding ISO/CSO loading at any stage of HEN. HEN will have next to no features of M33 except patching the firmware for homebrew. My initial idea was to load the M33 firmware and modify but I couldn’t get into contact with M33 for permissions to use their modules as of such I am using my own reverses.

To All:

To everyone begging their asses off for ISO support you can easily forget it. Even if I was to add it, about 50% of M33 is for ISO support and frankly I cannot be assed reversing that just to feed the pirates and the minority who actually use it for personal backups. I also believe you people are being incredibly ungrateful about there being no ISO support. For one, I have a homebrew enabled PSP 1000, I have no 2000 or a 3000. I should be technically studying for my exams but I still take the time to create this HEN for you folks. I think you need to take your time and realise what you’re saying.

We agree that ISO support will just feed the pirates out there. Homebrew support on a PSP-3000 will be great!. Although it is nice to convert that UMD we brought into a CSO/ISO for faster load times off the memory stick…That’s an added bonus but that leads to piracy and its killing the PSP. Well that and used games which are just as bad if not equal in the eyes of game developers.

Source: M for Mature Fourms

Related posts

• PSP-3000 HEN / Homebrew Enabler coming soon! (309)
• Video: HEN PSP-3000 Running Homebrew & Emulators (55)
• TIFF Exploit / HEN postponed (83)
• TIFF Based Exploit found, Firmware 5.03 Says Hello World! (51)
• HEN for Firmware 5.03 Video Proof & Update (183)

PSP-3000 HEN coming soon!

Things are indeed heating up on the homebrew scene. Looks like homebrew is coming to that PSP-3000 of yours. Davee has reported he has a working Kernel exploit on the way for the PSP-3000 / Ta88v3 Motherboards that will enable homebrew. Rather than rephrase what davee has posted, I’ll just quote it

HEN will be a stripped down enabler lacking many features of M33 custom firmware. It’ll allow the bootup of homebrew regardless but may be restrictive to certain applications (in cases where it will not boot at all). However, applications will be released to enhance the HEN such as the loading of M33 custom firmware when I get permission to use the modules.

As another note, the conditions of the TIFF exploit as very unstable (as you might have noticed) and flashing of modules to flash0 is improbable and will load off the memorystick. An eboot will be supplied to countervent this and will flash the modules in a more stable enviroment.

Release is currently unconfirmed but will be before Tuesday.

Source: M for Mature forums

Its looking good indeed. We are watching and waiting for this release. And it will be soon by the sounds of it (Before Tuesday).

Related posts

• PSP-3000 HEN will not have ISO / CSO support (165)
• Video: HEN PSP-3000 Running Homebrew & Emulators (55)
• TIFF Exploit / HEN postponed (83)
• TIFF Based Exploit found, Firmware 5.03 Says Hello World! (51)
• HEN for Firmware 5.03 Video Proof & Update (183)

The PSP-3000 TIFF Exploit. Proof it works....

True to his word MaTiAz has released Version 2 of his Hello World TIFF Exploit. This version works on PSP Slim units and we have reports from users that it even works on the PSP-3000! That’s a added bonus. As for the “bit of awesomeness” promised we have to wait just a little longer for that.

MaTiAz’s notes:

Just copy the files to the memory stick root, disconnect USB and go to photo menu. Don’t dismiss the exploit even if it doesn’t work on the first time, it’s *very* unstable. You might get it working on the first time, but you might as well have to try it 20 times!

The h.bin is loaded to 0×08800000, and the text address of paf.prx is passed in $a0 to the binary code. You can then trick out function imports, like for example sceDisplayWaitVblankStart: sceDisplayWaitVblankStart = (void*)(paf_addr+0×15F068);

Instructions:
1. Copy either slim.tiff or phat.tiff to /PSP/PHOTO/ folder on the memory stick, depending on
your PSP model. Do NOT copy both!
2. Copy h.bin to the root of the memory stick.

Also its reported to be working on the PSP-3000 (Ta88v3) Try the following: (Thanks to n00b81 for the tip!)

From p2s2p: The interesting thing is, they didn’t think it would work for 3000s but it does! Here is what you have to do…follow the same instructions for the slim, but then throw in about 5 or 8 other pics in your photo folder, and when the thumbnails are loading, you have to scroll up and down, and then the PoC should boot up. You need at least 5.02 on a 3000 to work this.

Source: PSPGen

Related posts

• TIFF Based Exploit found, Firmware 5.03 Says Hello World! (51)
• PSP-3000 HEN will not have ISO / CSO support (165)
• PSP-3000 HEN / Homebrew Enabler coming soon! (309)
• HEN for Firmware 5.03 Video Proof & Update (183)
• Yet another PSP bundle.. (6)

PSP firmware 5.03 running the TIFF Exploit!

The day many PSP owners have been waiting for is coming, as PSP homebrew developer MaTiAz has released a TIFF-based exploit in the form of a “Hello World,” proof of concept for PSP Firmware 5.03. So the idea of running homebrew on TA88v3 / PSP-3000 is rapidly approaching! (This is no late April fools joke)

*Update* 14-April: Version 2 has been released. Works on the Slim & PSP-3000. -> Hello World TIFF Exploit Version 2

The exploit is run in the PSP’s photo menu and takes advantage of a vulnerability found in the TIFF image library. Just think in the old early days of the PSP scene when using software downgrades and GTA: LCS TIFF exploits etc was the way to go.

This current version is only for PSP-1000 (Fat) units at this stage. But don’t fret a separate release is being prepared by MaTiAz for Slim models. Both the the PSP-2000 and PSP-3000 (Ta88v3).

MaTiAZ also commented that “a bit of awesomeness” is due out soon. We’ll keep you updated on this. Looks like we’ll all soon have hombrew access again on Firmware 5.03.

The days of TIFF based exploits aren’t long gone, at least not yet
Here’s the third TIFF exploit for the PSP, enjoy.

Just copy the files to the memory stick root, disconnect USB and go to photo menu.
Don’t dismiss the exploit even if it doesn’t work on the first time, it’s *very* unstable.
You might get it working on the first time, but you might as well have to try it 20 times!

The h.bin is loaded to 0×08800000, and the text address of paf.prx is passed in $a0 to the
binary code. You can then trick out function imports, like for example sceDisplayWaitVblankStart:

sceDisplayWaitVblankStart = (void*)(paf_addr+0×15F068);

This release works _only_ on fat PSPs. The slim version will come out later.

I’m not gonna include a list of credits here, I’ll just forget some important names and then
I’ll be screwed The people who need to be credited will know it anyway.

Have fun!

P.S. Just wait a few days, there’s a bit of awesomeness coming up.

- MaTiAz

Please see installation instructions included in the file.

Source: 5.03 TIFF Hello World

Related posts

• 5.03 TIFF Exploit Hello World V2 for PSP Slim’s & PSP-3000’s! (230)
• PSP-3000 HEN will not have ISO / CSO support (165)
• PSP-3000 HEN / Homebrew Enabler coming soon! (309)
• HEN for Firmware 5.03 Video Proof & Update (183)
• Yet another PSP bundle.. (6)